Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
File:                     832F3BA2D4A4666720A04785F7440BA744E9066D.mft (raw, json)
Hash identifier:          yc5mBP77SKYb+ec/L619spz0moHgoy3mkNZisUEEUJM=
Subject key identifier:   49:22:A3:69:B3:19:96:A6:52:A3:31:00:3E:28:B6:F2:98:87:92:01
Authority key identifier: 83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D
Certificate issuer:       /CN=832F3BA2D4A4666720A04785F7440BA744E9066D
Certificate serial:       61ED1E556531FA903463C3AEF71B24502035A6C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 02:39:48 +0000
Manifest this update:     Mon 21 Sep 2026 02:34:48 +0000
Manifest next update:     Tue 22 Sep 2026 04:34:48 +0000
Files and hashes:         1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: rj50c78OZE7EyiE8pv//nMMfuevJo1Qwb9zz5bieBoU=)
                          2: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: LSsyk3LQXyf/xjsLYb7f1ejhi/raliKL2ndVhfqssnE=)
                          3: 832F3BA2D4A4666720A04785F7440BA744E9066D.crl (hash: jgYpEVW9vu4CQAyXeoX8OifwSlu4DP/Ex71nO5fDto0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl
                          rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 04:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ed:1e:55:65:31:fa:90:34:63:c3:ae:f7:1b:24:50:20:35:a6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832F3BA2D4A4666720A04785F7440BA744E9066D
        Validity
            Not Before: Sep 21 02:34:48 2026 GMT
            Not After : Sep 22 04:34:48 2026 GMT
        Subject: CN=4922A369B31996A652A331003E28B6F298879201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:18:be:de:4f:4e:54:aa:aa:61:e2:74:c4:
                    21:c5:25:80:8a:fe:8a:99:af:62:c4:32:53:de:f4:
                    62:e2:de:a4:0e:a9:47:b6:4e:cf:03:3f:81:29:67:
                    a2:bc:46:e5:b2:e7:b0:a0:7e:5e:8c:22:9a:14:dd:
                    2b:2f:26:08:3b:d5:38:3b:2c:ae:47:6d:a9:f3:81:
                    9d:d8:17:b6:f2:e9:2b:ac:73:d7:ca:7c:8b:c2:c5:
                    0f:59:a3:71:5c:62:7a:85:a5:0a:e7:93:43:5f:06:
                    c1:fc:69:ab:6a:3a:8a:ad:2e:72:4f:51:82:d9:46:
                    8b:ca:28:be:fc:77:b5:ac:14:33:49:c3:34:d9:ac:
                    57:fa:fa:2f:1a:20:f9:eb:cc:f4:ea:32:75:33:1b:
                    d5:ff:ad:85:90:30:54:3a:1e:03:0f:11:7d:96:6c:
                    62:2f:d0:fe:2b:9c:5c:30:83:c1:52:1b:d8:73:fe:
                    74:c2:fc:96:1c:5a:c8:48:51:3d:86:e2:ca:ad:9d:
                    6e:d2:5f:ec:4d:4e:6d:10:3d:27:82:45:15:5d:ce:
                    26:fd:44:fd:e6:54:f4:68:3b:39:75:3d:91:f7:da:
                    63:d7:b3:f9:a6:f4:7a:15:e4:45:37:d2:24:ae:fc:
                    04:a5:8e:46:df:7f:41:fc:2e:b6:39:56:cf:88:1d:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:A3:69:B3:19:96:A6:52:A3:31:00:3E:28:B6:F2:98:87:92:01
            X509v3 Authority Key Identifier:
                keyid:83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:b5:54:55:9a:f8:03:ac:14:ee:8a:02:c4:67:c7:fe:b0:
         cb:a3:ec:36:f3:37:8f:fd:b1:c6:fb:2f:b5:fb:7a:1a:f7:ca:
         46:91:cb:83:c9:b2:ce:4c:a7:93:e8:f0:f3:5d:d4:7c:1d:c2:
         0b:74:c0:4c:26:d7:23:c1:63:b5:41:6a:43:4a:63:2e:80:39:
         44:d0:b9:36:c8:9a:bd:9b:8f:c4:d0:bd:ff:3a:cc:ee:be:ff:
         37:2b:83:fa:f5:14:a8:6f:ee:3d:44:9f:91:50:40:43:6e:25:
         82:de:f8:16:45:ed:2d:1d:6e:48:88:c6:1c:ba:6d:57:96:3e:
         51:5d:fd:60:ce:28:10:1a:79:18:6b:e5:99:d8:4e:e0:8f:f0:
         44:1c:a4:e5:41:ee:7b:60:54:fd:01:bd:f3:a2:64:79:fa:cd:
         42:da:b7:d9:eb:69:40:3a:3b:c9:7f:62:2d:74:47:77:b6:98:
         5e:b5:2b:2c:18:39:1c:6e:7b:88:e3:32:b9:b4:92:71:a5:23:
         55:0b:c7:b7:5e:b8:aa:aa:fd:66:81:6a:ff:28:31:31:47:74:
         fe:db:25:e7:cf:d3:ca:b2:f3:b1:c7:ea:2a:0e:85:e9:3b:fa:
         93:4b:3c:ee:df:27:e0:30:83:59:1e:d4:6a:09:55:c2:42:4a:
         b4:cf:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:42:19 2026 by rpki-client